Try this query: index=xxx earliest=-2w@w0 latest=@w6@d+24h | timechart span=7d count(response_time) | streamstats count as week_num | eval Week="Week".week_num | fields - week_num, _time, _span | transpose header_field="Week"   transpose command should be able to do what you are looking for. ... View more